[SSSD] Design discussion: SSSD running as a non-root user

Simo Sorce simo at redhat.com
Mon Jul 28 14:11:46 UTC 2014


On Mon, 2014-07-28 at 13:59 +0200, Jakub Hrozek wrote:
> On Mon, Jul 28, 2014 at 06:29:39AM -0400, Simo Sorce wrote:

> Currently we monitor the resolv.conf and the netlink socket, none of
> which requires root privileges. If we need to keep the root privs for
> the proxy backend, though, it's just an academic discussion..

Yes the proxy backend needs to run as root or have helpers, so does the
monitor I guess.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list